Skip to content

3.1 SPICE and VNC

Sylvain Girod edited this page Dec 21, 2019 · 5 revisions

SPICE

Note: Some default vars are in VMMgr_.conf


enable Spice with:

SPICE=on

Interface to use:

SPICEIP=spice-bridge

Type of interface. Can be: bridge or tun, for now, prefer bridge

SPICETYPE=bridge

Generate a new port based on port range ( SPICEMINPORT - SPICEMAXPORT ):

SPICEPORT=new

Finally choose Spice template, found in DATA/VMMgr_Spice: SPICECLEAR use not encryption and a password. SPICESECURE use TLS + Password. See below for certificates

SPICETPL=SPICESECURE

SPICEMODE specify the channels mode. For now this is for all channels and you can choose between 'plaintext' and 'tls'

SPICEMODE=tls

Password for spice:

SPICEPWD="spicepwd"

Spice IP Version ( 4 or 6 )

SPICEIPVER=6

Spice ports range:

SPICEMINPORT=2000

SPICEMAXPORT=3000

Note: it's best to set port range in VMMgr_.conf

Example:

New_Network spice-bridge "4|10.98.90.0|24" "10.98.90.2|10.98.90.250" 10.98.90.1
SPICE=on
SPICEIP=spice-bridge
SPICETYPE=bridge
SPICETPL=SPICESECURE
SPICEPORT=new

SPICE TLS how-to:

in DATA/VMMgr_Spice, the variable SPICECERTS specify certificates:

x509-key-file the server private key file

x509-key-password password for private key

x509-cert-file server certificate

x509-cacert-file CA chain file

x509-dh-key-file Diffie Hellman parameters

you can follow this link: spice-user-manual at section: Generating self-signed certificates


VNC

VNC work as the same:

VNC=off
VNCIPVER=$IPVER
VNCPORT=new
VNCMINPORT=5900
VNCMAXPORT=6900
VNCTYPE=bridge
VNCPWD="vncpwd"
VNCTPL=VNCCLEAR

Variables and templates:

VNC/SPICE variables and templates can be found in DATA/VMMgr_VNC and DATA/VMMgr_Spice. You can add your own custom options and create custom variable for VNCTPL and SPICETPL.

For each template you will use in VNCTPL and SPICETPL (like SPICECLEAR on VNCSECURE), you must create a corresponding template in R-Templates: 1 for remote-viewer, and 1 for Remmina